CVE-1999-1318: High severity Sun SunOS vulnerability
/usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Trojan horse programs.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure /usr/5bin/su does not include the current working directory (.) in its search path. Remove '.' from the PATH used by su or modify the su invocation to use a fixed safe path so that executables in the current working directory cannot be run with elevated privileges.
/usr/5bin/su (SunOS) search path (PATH) = remove '.' (current working directory)
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1318?
CVE-1999-1318 is considered a high severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-1999-1318?
To fix CVE-1999-1318, you should modify the search path for the 'su' command to remove the current working directory (.) or update to a fixed version of SunOS.
Who is affected by CVE-1999-1318?
CVE-1999-1318 affects all versions of SunOS up to and including 4.1.3.
What type of vulnerability is CVE-1999-1318?
CVE-1999-1318 is a local privilege escalation vulnerability.
Can CVE-1999-1318 be exploited remotely?
CVE-1999-1318 cannot be exploited remotely as it requires local access to the system.